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IN THE CLAIMS 

Please amend the claims as follows: 




(Amended) A method of monitoring a computer network for 
'specified events at a presence, comprising: 

gathering heterogeneous data, as directed by the presence, 
at two or mork remote computers and placing the gathered data in 
a data stream an\ forwarding the data stream to the presence; 

receiving, at \he presence, the at least one data stream 
sent from the two or ri^re remote computers, the data stream 
including data representative of events; and 

applying rules to the \t least one data stream at the 
presence for sorting data representative of events and for taking 

I one or more actions based on a specified event. 

FIJ 



3 . Cancel 




(Amended) The method of claim 1, wherein said gathering 
formed by an agent . 

9 . Cancel 

10. Cancel 

11. Cancel 

12. Cancel 

13 . Cancel 
21. Cancel 




(Amended) An article usable to monitor a computer 
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network for specified events at a presence, comprising: 

least one sequence of machine executable instructions; 
a mtedium bearing the executable instructions in machine 
readable form, wherein execution of the instructions by one or 
more processors causes the one or more processors to: 

gather heterogeneous data, as directed by the presence, at 
two or more remoteV computers and place the gathered data in a 
respective data stream to the presence; 

receive at least chae data stream at the presence, the data 
stream including data representative of events; and 

apply rules to the dataK stream at the presence, for sorting 
data representative of events a^id for taking one or more actions 
based on a specified event. 




k\V ^ • (Amended) A computer architecture for monitoring a 
'computer\network at a presence for specified events, comprising: 

gathering means, at two or more remote computers, for 
gathering heterogeneous data, as directed by the presence, and 
placing the data\in a respective data stream and forwarding the 
data stream to the^presence ; 

receiving means ,\at the presence, for receiving at least one 
data stream at a comput^v, the data stream including data 
representative of events; and 

applying means, at the presence, for applying rules to the 
at least one data stream for sorting data representative of 
events and for taking one or more k^tions based on a specified 



25. Cancel 




6. (Amended) A computer system usable to monitor a 
computeV network for specified events at a presence, comprising: 
a processor; and 

a memory coupled to said processor, the memory having stored 
therein sequences of instructions, which, when executed by said 
processor, caused said processor to perform the steps of: 

gathering heterogeneous data, as directed by the presence, 
at two or more remoter computers and placing the gathered data in 
a respective data streata to the presence; 

receiving at least one data stream at the presence, the data 
stream including data representative of events; and 

applying rules to the dat^a stream at the presence for 
sorting data representative of events and for taking one or more 
actions based on a specified event, 
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Please add new claims 28 and 29 as follows: 



The method of claim 1, wherein said gathering step 
includes cd^lecting/generating data at the two or more remote 
computers . 




29. The method\f claim 1, wherein said gathering and 
receiving step are perfoWed in real-time--. 
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